font.hta

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I keep have a windows xp program access the internet. The program is
font.hta. Is this legitimate or is it spyware?
 
kyli;

font.hta = scumware
===========
Right click the IE icon | Properties | Advanced tab |
Make sure both of these are NOT checked.

 Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them in order to display the page properly or
perform a particular task.]]
 Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if a Web
page needs them in order to display the page properly or perform a
particular task.]]

Apply | OK
=================================
It is known as Scumware. Visit these sites. Download, install, run, update
and
run again; one or all. They are all good, FREE utilities.
The first site gives some recommendations.
http://www.spywareinfo.com/downloads.php?cat=all#s-p
1) Spybot S & D
http://www.safer-networking.org/index.php?lang=en&page=download
2) SpywareBlaster
http://www.javacoolsoftware.com/spywareblaster.html
3) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/index.html
4) AdAware
http://www.lavasoft.de/support/download/
 
On Wed, 11 Feb 2004 18:07:04 GMT, "Wesley Vogel"
font.hta = scumware
Click to expand...

If not outright malware.

On the Win9x I set up, this never runs, because I rename away the
MSHTA.EXE engine that runs .hta files - but I've not tried this in XP.
Reasons: XP itself may rely on the ability to run HyperText
Applications, and SFP is liable to re-assert the deleted engine.

There may be other ways to kill MSHTA.EXE / .HTA, and maybe we should
look them up and get testing if .HTA comes back into malware fashion.


---------- ----- ---- --- -- - - - -
Click to expand...
Consumer Asks: "What are you?"
Market Research: ' What would you like us to be? '
 
http://www.tek-tips.com/gviewthread.cfm/lev2/67/lev3/74/pid/608/qid/740935

[[carrr (TechnicalUser) Jan 7, 2004
This is a pretty clever little turd (<snip>ww.searchdot.net) of malware
prog.
The key seems to lie files with .hta extensions.
One that I've seen come up associated with this hijack is "font.hta"

Removing this entry using Hijack This! should cure your problem:

O4 - HKLM\..\Run: [Truefonts] C:\WINDOWS\FONTS\fonts.hta]]
=====================
http://computercops.biz/postt10015.html&view=previous

[[hey i ran into the problem too formating dont help it somehow temporary
hides itself in your ram or something the only way to get rid of this pain
in the ass is to delete a file called font.hta and it is located in your
windows folder delete that file that is the source of this..]]

[[Thanks guys i just succesfully delted hugesearch from my pc. I used
HijackThis and delted this file :
O4 - HKLM\..\Run: [Truefonts] C:\WINDOWS\Fonts\fonts.hta
After this my Pc seams to be ok or better i hope so . Again one more time
thank you!!!]]
 
Back
Top